Manage XP-SP2 firewall settings from W2K Domain Group Policy 1

[gregfranklin]

I have 70 PC's on my domain with Windows XP SP2. My problem is I have Mcafee Protection Pilot which will push an agent out to install the AV program.

Mcafee informs me that Windows XP SP2 firewall needs to be disabled for this to happen.

I have a Windows 2000 server domain and is there an adm file that will disable my Windows XP clients' firewalls??

I have seen a couple of posts on here but the answers I find are not correct. They say to download the latest adm files, but none of which have the option of disabling the Windows XP firewall. Any Ideas??

 

[porkchopexpress]

If you load the 2003 adminpack onto an XP SP2 pc then modify the GP it should automatically upgrade the adm file.

Then i would recommend adding the appropriate ports to the allowed list rather than turning off the firewall.

 

[porkchopexpress]

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/mangxpsp2/mngdepgp.mspx#EBAA

 

[gregfranklin]

Thanks for the quick reply, okay I did download the gpmc tool, I did this...

To upgrade existing GPOs

1.
Log on to a computer with SP2 installed.

2.
Open GPMC and click the domain that contains the GPOs you want to upgrade.

3.
Click the Group Policy objects container. This contains all the GPOs in the domain.

4.
Right-click the GPO you want to upgrade and select Edit. The GPO opens in the Group Policy Object Editor. This upgrades the GPO with the latest .adm files on your local computer. This .adm file is then automatically replicated to domain controllers throughout your environment.

5.
Open each GPO that you want to upgrade.


I still can't find where to disable the firewall in the GP? I only have to disable it while I push the agents out.

 

[porkchopexpress]

Look here but i'm not sure there is a policy to dissable it so you might have to exclude to ports.

computer configuration >> adminsitrative templates >> network >> network components >> windows firewall >>
domain profile >>

 

[gregfranklin]

Actually I just found it, but thank you for the help!! Yeah looks like I will have rules to allow ports.

 

[porkchopexpress]

List of common apps and ports in the doc below.

http://support.microsoft.com/default.aspx?kbid=842242#XSLTH3147120123120121120120